It is not always about windows and server security. If your code is not good, it will not help you to have a secure server. You might want to have a security analysis done of your website (costs around $100) or a code check (a lot more expensive). There is company that does that for a fair price:
Internet Computer Security: consulting, integration, technology - STEALTH - ISSŪ Inc.
Website security analysis
Linear Mode
